CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4205 matches found

OSV•added 2018/01/16 7:29 p.m.•10 views

CVE-2018-5370

BizLogic xnami 1.0 has XSS via the comment parameter in an addComment action to the /media/ajax URI...

6.1CVSS5.8AI score0.02186EPSS

SaveExploits5References2

Prion•added 2018/01/16 7:29 p.m.•17 views

Design/Logic Flaw

BizLogic xnami 1.0 has XSS via the comment parameter in an addComment action to the /media/ajax URI...

4.3CVSS5.9AI score0.02186EPSS

SaveExploits5References2Affected Software1

CVE•added 2018/01/16 7:00 p.m.•64 views

CVE-2018-5370

CVE-2018-5370 affects BizLogic xnami 1.0, a PHP-based image sharing script. The issue is a Cross-Site Scripting (XSS) vulnerability via the comment parameter in the addComment action to the /media/ajax URI. The root cause is insufficient input sanitization on the comment field, enabling injection...

6.1CVSS5.9AI score0.02186EPSS

SaveExploits5References2Affected Software1

exploitpack•added 2018/01/12 12:00 a.m.•53 views

Xnami 1.0 - Cross-Site Scripting

Xnami 1.0 - Cross-Site Scripting Exploit Title: Xnami Image Sharing - Persistent XSS Vulnerability Google Dork: " Copyright 2017 xnami. " & 2018 Date: 11-01-2018 Exploit Author: Dennis Veninga Contact Author: d.veninga at networking4all.com Vendor Homepage: bizlogicdev.com Version: 1.0 CVE-ID:...

4.3CVSS0.02186EPSS

SaveExploits5

Exploit DB•added 2018/01/12 12:00 a.m.•34 views

Xnami 1.0 - Cross-Site Scripting

Exploit Title: Xnami Image Sharing - Persistent XSS Vulnerability Google Dork: " Copyright 2017 xnami. " & 2018 Date: 11-01-2018 Exploit Author: Dennis Veninga Contact Author: d.veninga at networking4all.com Vendor Homepage: bizlogicdev.com Version: 1.0 CVE-ID: CVE-2018-5370 Xnami facilitates the...

6.1CVSS6.1AI score0.02186EPSS

SaveExploits5

Packet Storm•added 2018/01/12 12:00 a.m.•38 views

Xnami Image Sharing 1.0 Cross Site Scripting

6.4AI score0.02186EPSS

SaveExploits5

Hacker One•added 2018/01/11 10:15 p.m.•33 views

Ubiquiti Inc.: Reflected XSS

Due to the lack of sanitisation in the commend area, with a especially crafted message, is possible to execute a XSS with the "preview" function. If a draft is save, is possible to exploit this bug using as and stored-XSS. The "New Discussion" page on the Spanish and Portuguese forums have a...

0.5AI score

SaveExploits0

Hacker One•added 2018/01/03 1:49 p.m.•29 views

Paragon Initiative Enterprises: Airship: Persistent XSS via Comment

Affected: Airship 2.0.0 commit 15bdc0d CVSS ---- Medium 6.1 https://www.first.org/cvss/calculator/3.0CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Description ----------- The "name" field of a comment on a blog post is vulnerable to persistent XSS. When replying to a comment, the comment name is...

0.2AI score

SaveExploits0

CNVD•added 2018/01/03 12:00 a.m.•9 views

Vanilla Forums Cross-Site Request Forgery Vulnerability

Vanilla Forums is a Canadian company Vanilla Forums PHP-based open source forum program . A cross-site request forgery vulnerability exists in versions of Vanilla Forums prior to 2.1.5. A remote attacker can exploit this vulnerability to delete topics and comments on the forum...

8CVSS6.8AI score0.01647EPSS

SaveExploits5References1

NVD•added 2017/12/27 7:29 p.m.•28 views

CVE-2015-7324

Multiple cross-site scripting XSS vulnerabilities in helpers/comment.php in the StackIdeas Komento comkomento component before 2.0.5 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 img or 2 url tag of a new comment...

6.1CVSS6.1AI score0.01792EPSS

SaveExploits3References3

OSV•added 2017/12/20 9:29 a.m.•27 views

CVE-2017-17792